pushpasharmila

<p>Infospica Headless API transforms WordPress into a secure and flexible headless CMS by providing a custom REST API namespace with full CRUD capabilities.</p>
<p>Instead of modifying the default WordPress REST API, this plugin creates an isolated and configurable API layer designed specifically for secure and scalable headless architectures.</p>
<h3>Ideal for</h3>
<ul>
<li>Headless WordPress (Next.js, Nuxt, React, Vue, Angular)</li>
<li>Mobile applications</li>
<li>SaaS platforms</li>
<li>Custom frontend integrations</li>
<li>API-driven architectures</li>
</ul>
<h3>Key Features</h3>
<ul>
<li>Custom API namespace with version control</li>
<li>Full CRUD endpoints (GET, POST, PUT, PATCH, DELETE)</li>
<li>Supports:
<ul>
<li>Pages</li>
<li>Posts</li>
<li>Custom Post Types</li>
</ul>
</li>
<li>Optional ACF field support (if ACF is active)</li>
<li>Authentication-aware read and write access</li>
<li>Capability-based write protection</li>
<li>Built-in pagination support (<code>?page</code> and <code>?per_page</code>)</li>
<li>Clean and intuitive admin settings UI</li>
<li>Clean uninstall (removes plugin data and settings)</li>
</ul>
<h3>Security Highlights</h3>
<ul>
<li>All API endpoints require authentication</li>
<li>Write operations require appropriate WordPress capabilities</li>
<li>CSRF protection enforced for cookie-based authentication (nonce validation)</li>
<li>Sensitive user data (such as email addresses) is not exposed</li>
<li>WooCommerce core pages are automatically excluded from API responses</li>
</ul>
<h3>Authentication</h3>
<p>All endpoints require authentication.</p>
<p>Supported authentication methods:</p>
<ul>
<li>WordPress login cookies (browser/admin usage)
<ul>
<li>Write requests require <code>X-WP-Nonce</code> header or <code>_wpnonce</code> parameter</li>
</ul>
</li>
<li>Application Passwords (recommended for external applications)</li>
<li>Any authentication method that properly sets the current user context</li>
</ul>
<p>Write operations are additionally restricted by WordPress capabilities (e.g., <code>edit_posts</code>, <code>delete_posts</code>).</p>
<h3>Available Endpoints</h3>
<p>Base structure:</p>
<pre><code>/wp-json/{namespace}/{version}/
</code></pre>
<p>Example:</p>
<pre><code>/wp-json/my-api/v1/
</code></pre>
<h4>Status</h4>
<p>GET <code>/status</code></p>
<h4>Pages</h4>
<p>GET <code>/pages</code><br />
GET <code>/pages/{id}</code><br />
POST <code>/pages</code><br />
PUT <code>/pages/{id}</code><br />
PATCH <code>/pages/{id}</code><br />
DELETE <code>/pages/{id}</code></p>
<h4>Posts</h4>
<p>GET <code>/posts</code><br />
GET <code>/posts/{id}</code><br />
POST <code>/posts</code><br />
PUT <code>/posts/{id}</code><br />
PATCH <code>/posts/{id}</code><br />
DELETE <code>/posts/{id}</code></p>
<h4>Custom Post Types</h4>
<p>GET <code>/{post-type}</code><br />
GET <code>/{post-type}/{id}</code><br />
POST <code>/{post-type}</code><br />
PUT <code>/{post-type}/{id}</code><br />
PATCH <code>/{post-type}/{id}</code><br />
DELETE <code>/{post-type}/{id}</code></p>
<h3>Pagination</h3>
<p>All list endpoints support:</p>
<pre><code>?page=1  
&per_page=10 (maximum 50)
</code></pre>
<p>Example:</p>
<pre><code>/wp-json/my-api/v1/posts?page=2&per_page=5<h3>License</h3>
</code></pre>
<p>This plugin is licensed under GPLv2 or later.</p>


Infospica Headless API

Transform WordPress into a secure headless CMS with a custom REST API, full CRUD support, CPT integration, and ACF compatibility.

ben.moody

<p>Plugin provides a framework sets up WordPress as a headless CMS.</p>
<p>Framework options include:</p>
<ul>
<li>JSON Web Token Authentication (optional)</li>
<li>Adds Gutenberg block data to REST responses (optional)</li>
<li>Protects REST requests with nonce (optional)</li>
<li>Cleans up REST response objects (optional)</li>
<li>Removes non required REST endpoints (optional)</li>
<li>Disables the frontend (optional)</li>
</ul>
<p>All modules can be enabled/disabled or configured to suit most if not all WordPress as a headless CMS use cases.</p>
<p>Developing a single page React app but still want to use the WordPress theme based fronted.</p>
<p>Not a problem, maybe you just use these modules:</p>
<ul>
<li>Adds Gutenberg block data to REST responses</li>
<li>Protects REST requests with nonce</li>
<li>Cleans up REST response objects</li>
<li>Removes non required REST endpoints</li>
</ul>
<p>Developing a truly headless WordPress single page app or mobile app and just want WordPress for the backend?</p>
<p>Maybe use these modules:</p>
<ul>
<li>JSON Web Token Authentication</li>
<li>Adds Gutenberg block data to REST responses</li>
<li>Protects REST requests with nonce</li>
<li>Cleans up REST response objects</li>
<li>Removes non required REST endpoints</li>
<li>Disable the WordPress frontend</li>
</ul>
<p>You get the idea.</p>
<p>The plugin documentation is held inside the plugin ‘options’ page in the WordPress admin, although there are some docs for the custom rest endpoints:</p>
<p><a href="https://documenter.getpostman.com/view/1175138/RztkPpV4#fc567f81-ff31-442e-a236-fa247bd1fd6c" rel="nofollow ugc">Learn More about plugin endpoint requests</a></p>
<p>Anyway if you are looking to use WordPress as a headless CMS on a React, React Native, Angular, iOS/Android native project. This plugin should go a long way to setting WordPress up as you need it.</p>


WP Headless CMS Framework

I like your plugin! Keep on going with this one! :)

Plugin provides a framework sets up WordPress as a headless CMS.

Infospica Headless API vs WP Headless CMS Framework